SECURITY UPDATE: AD DC can be forced to issue rc4-hmac Kerberos tickets
debian/patches/CVE-2022-45141.patch: fix session key selection algorithm
for selecting the ticket in strongest-to-weakest order, thus allowing
the target server to select better encryption